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[57] ABSTRACT 

A system for eliminating unsolicited electronic mail gener- 
ates and stores a user inclusion list including identification 
data for identifying e-mail desired by the user. Data from 
one or more fields of incoming electronic mail messages are 
compared with the identification data stored in the user 
inclusion list. If the electronic mail message data matches 
corresponding identification data from the user inclusion 
list, the e-mail message is marked with a first display code, 
such as "OK." If no match is detected, the system performs 
at least one heuristic process to determine whether the 
electronic mail message may be of interest to the user. If the 
message satisfies one or more criteria as determined by the 
heuristic process and is therefore of potential interest to the 
user, the message is marked with a second display code, 
such as "NEW." If the e-mail message does not satisfy any 
of the heuristic criteria, the e-mail message may be marked 
with a third display code, such as "JUNK." The processed 
e-mail messages are displayed to the user in a display mode 
corresponding to the display codes respectively assigned to 
the messages. 

31 Claims, 7 Drawing Sheets 
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SYSTEM AND METHOD FOR FILTERING tion is to provide a system and method for eliminating 

UNSOLICITED ELECTRONIC MAIL unwanted e-mail messages. According to the present 

MESSAGES USING DATA MATCHING AND invention, incoming e-mail messages are filtering using an 

HEURISTIC PROCESSING automatically updated inclusion list. E-mail messages 

pipt n nc tuc iMVPMT-inw 5 received from sources other than those on the automatically 

riiiLsU Ur ihu in vtN 1 1UIN updated inclusion list are not automatically discarded. 

The present invention relates to a method and system for Instead such e-mail messages are further processed using 

filtering electronic mail ("e-mail") sent to one or more users 0 ne or more heuristic processing techniques to determine 

via a communications network to eliminate unsolicited whether the e-mail is truly junk mail or is instead e-mail 

e-mail from the user's electronic mailbox. The method and from a new source which may be of interest to the user, 

system according to the present invention sort e-mail mes- 10 Thus, the subject invention makes it possible to eliminate 

sages by comparing one or more predetermined data fields virtually all of unsolicited e-mail messages and is not 

of each e-mail message with data stored in an automatically vulnerable to changes in the unsolicited e-mail origin 

updated database of acceptable addresses and domains. The addresses. The present invention also enables the user to 

e-mail messages with matching data are forwarded to the receive new e-mail of potential interest to the user even 

respective user's mailbox. The e-mail messages without 15 though the source of the e-mail is not included in the user's 

matching data are sorted using one or more heuristic sorting inclusion list. Furthermore, because the filtering is per- 

methods and categorized either as "junk," which are not of formed based upon parameters defined by the user, the 

interest to the user, or as "new," which are of potential invention should not be subject to the court rulings of 

interest to the user. Each message is displayed to the user in exclusion filters used to date. 

accordance with its respective status. 20 A method for eliminating unsolicited electronic mail 

_ _ r) Txrr\ Ar tuc ima ^ xmnX r according to the present invention includes the steps of: 

BACKGROUND OF THE INVENTION ( a ) automatically generating and storing a user inclusion list 

The rapid increase in the number of users of electronic including identification data for identifying e-mail desired 

mail and the low cost of distributing electronic messages via by the user; 

the Internet and other electronic communications networks 25 0 5 ) receiving an electronic mail message; 

has made marketing via electronic mail ("e-mail") an attrac- (c) comparing data from the received electronic mail mes- 

tive advertising medium. Consequently, e-mail is now fire- sa S e with identification data in the user inclusion list; 

quently used as the medium for widespread marketing ( d ) U P° D identifying a match between the electronic mail 

broadcasts of messages to e-mail addresses, commonly messa S e data and the identification data, marking the 

known as "spam." 30 e ' mai1 messa S e wth a ^ rst display code; and 

- . .mi r i (e) displaying the electronic mail message marked with the 

Users of electronic mail, however, frequently are not ^ t0 the user , wherein the electronic mail 

eager to have their e-mail boxes filled with unsolicited marked with the first display code is displayed to the user 

e-mails. Users accessing the Internet through large service m a ^ jsl display format, 

companies such as America Online® (AOL) or Microsoft met hod further includes the following steps: 

Network® (MSN) or large businesses such as IBM® and 35 (f) upoa failing to detect a match between the electronic mail 

General Motors® are targeted by e-mail marketers. The message data and the identification data in the user 

sending and receiving of unsolicited e-mail messages are inclusion list, performing at least one heuristic process to 

increasing problems for both online services and corpora- determine whether the electronic mail message may be of 

tions. Online services object to unsolicited mail because it interest to the user; 

reduces their users' satisfaction of their services, and cor- 40 ( g ) upon identifying the electronic mail as of interest to the 

porations want to eliminate unsolicited mail because it userj marking it with a second display code; 

reduces worker productivity. ( n ) displaying the electronic mail marked with the second 

There are a number of known methods for filtering display code to the user; and 

unsolicited e-mail. Typically, these methods are designed to (i) upon failing to identify the electronic mail as of interest 

block e-mails from particular e-mail addresses that originate 45 t o the user, marking the electronic mail message with a 

unsolicited e-mail. For example, filtering methods used by third display code, wherein the e-mail message is dis- 

America On Line® and Prodigy® use an exclusion filter that played to the user. 

blocks e-mail messages received from addresses that are A system for eliminating electronic unsolicited mail 

suspected sources of unsolicited e-mail are blocked. according to the present invention includes an inclusion list 

However, this approach is vulnerable to rapid changes in the 50 processor for automatically creating and storing identifica- 

source of unsolicited e-mail. Furthermore, because courts tion data for identifying e-mail desired by the user; an e-mail 

have ruled that online services can not automatically block storage unit for storing incoming electronic mail messages; 

e-mail addresses from their members, these services are an e-mail filter for filtering the stored incoming electronic 

available only if the user requests them. mail messages in accordance with the identification data 

Other known e-mail filtering techniques are based upon 55 stored in the inclusion list processor; and a user interface for 

an inclusion list, such that e-mail received from any source displaying the filtered electronic mail messages to a user and 

other than one listed in the inclusion list is discarded as junk. for enabling the user to modify the identification data stored 

However, these methods require the user and/or service in the inclusion list processor. 

provider continually to update the inclusion list manually. If The foregoing and other features, aspects, and advantages 

the inclusion list is not updated regularly, the list will 60 of the present invention will become more apparent from the 

quickly become outdated, resulting in exclusion of desired following detailed description when read in conjunction 

e-mail messages from new sources and continued inclusion with the accompanying drawings, 

of undesired e-mail messages from old sources. BRIEF DESCRIPTION OF THE DRAWINGS 

SUMMARY OF THE INVENTION 65 FIG> x p rovide a bk)ck diagram of the components of a 

In view of the drawbacks of the known methods for user-site software system in accordance with the present 

filtering unsolicited e-mail, an object of the present inven- invention. 
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FIG. 1A provides a block diagram of an alternative 
configuration of the user-site software system shown in FIG. 
1. 

FIG. 2 provides a block diagram of the components of an 
inclusion list processor for use in the system of FIG. 1. 

FIG. 3, 3 A provide a block diagram of the components of 
a server-based embodiment of the present invention. 

FIG. 4, 4A provide a process flow chart for a method for 
eliminating undesired unsolicited e-mail according to the 
present invention. 

FIG. 5 provides an example of data stored in a user 
inclusion list. 

FIG. 6 provides an additional process flow chart for a 
method for eliminating undesired unsolicited e-mail accord- 
ing to the present invention. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS 

The present invention will now be described with refer- 
ence to the accompanying drawings, which are provided as 
illustrative examples of preferred embodiments of the 
present invention. Notably, the present invention may be 
implemented using software, hardware or any combination 
thereof as would be apparent to those of skill in the art. 

As shown in FIG. 1, a preferred embodiment of a user 
terminal software system for eliminating unsolicited e-mail 
in accordance with the present invention includes an inclu- 
sion list manager 102 that creates, stores and automatically 
maintains a user inclusion list. The user inclusion list 
includes all identification data needed to determine the status 
of incoming e-mail messages. As will be described below in 
further detail, the user inclusion list may be created and 
maintained automatically and also modified manually by the 
user. 

The user terminal software system of FIG. 1 further 
includes an e-mail storage database 106 that receives and 
stores incoming e-mail and stores records of outgoing 
e-mail. An e-mail filter 104 filters the incoming e-mail stored 
in store 106 in accordance with the user inclusion list stored 
in database 102. A user interface 108 receives inputs from 
the user and displays e-mail information to the user. The user 
interface 108 may be implemented, for example, using a 
known e-mail software software package, such as 
Netscape® Messager®, Microsoft® Outlook®, Microsoft® 
Exchange®, Lotus® cc: mail®, Lotus Notes®, Novell® 
Groupwise®, Eudora®, or America OnLine®. User inter- 
face 108 may be used, for example, to display a user's 
mailbox, receive and process e-mail messages and inputs 
from the user, manage the user's mailbox, and display 
mailbox management information to enable the user to 
manage the mailbox. 

According to one embodiment of the present invention, 
the e-mail filter 104 filters incoming mail received in the 
user's e-mail store 106 based upon three fields of data 
contained in the incoming e-mail, the "FROM" field, the 
"TO" field and the "SUBJECT" field. Notably, filtering may 
also include the "CC" field and the "BCC" field to filter 
e-mail messages on which the user is listed as a CC or BCC 
recipient rather than a direct recipient. Preferably, the e-mail 
filter 104 compares the "FROM", "TO", "CC", "BCC", and 
"SUBJECT" fields of an incoming e-mail message with the 
corresponding data categories stored in the inclusion list 
manager 102. 

In a preferred embodiment, if the data in any of the fields 
of the incoming e-mail message match data in the corre- 
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sponding data category stored in the inclusion list manager 
102, the e-mail is marked by the filter 104 with a first display 
code indicating the "OK" status of the message. The mark- 
ing of the incoming e-mail may be accomplished using 
known programming techniques as would be know to one of 
skill in the art, for example, by adding an additional field of 
information to the received e-mail format or by altering one 
or more existing e-mail fields to indicate the display status 
of the e-mail. The e-mail message is then displayed in the 
user's inbox by the user interface 108 in accordance with the 
first display code. 

If the e-mail filter 104 does not detect a match between the 
stored inclusion list data and the data from the received 
e-mail message, the incoming e-mail is further processed 
using one or more heuristic processing techniques to deter- 
mine whether the e-mail may be of interest to the user. The 
filtering process and the heuristic processing techniques will 
be described in further detail below. If the e-mail message 
satisfies one or more criteria as determined with the heuristic 
processing, the e-mail message is marked with a second 
display code. If the data in the e-mail message do not match 
the data in the inclusion list and if the message also does not 
satisfy the heuristic processing criteria, then the message is 
marked with a third display code. 

Each e-mail message is thus displayed to the user in 
accordance with its respective display code, thereby indi- 
cating the status of the message to the user. 

FIG. 2 provides a block diagram of an inclusion list 
manager 102 for use in the system of FIG. 1. The inclusion 
list manager 102 includes a list processor 201 and a storage 
unit 202. The storage unit 202 stores the user inclusion list 
as created and maintained by the list processor 201. 

According to one embodiment of the present invention, 
the inclusion list processor 201 automatically creates, stores 
and updates five different categories of data corresponding 
to five different data fields of incoming e-mail messages: 
"TO," "FROM," "CC," "BCC," and "SUBJECT" and other 
user-definable text fields in the header. An example of such 
a list is shown in FIG. 5. 

The "FROM" data stored by the inclusion list processor 
201 is created and maintained as follows. In the preferred 
embodiment depicted in FIG. 2, the list processor 201 
initially creates the user inclusion list by automatically 
gathering acceptable e-mail source addresses from a plural- 
ity of sources 203 through 208. Sources 203 (user's inbox), 
204 (user's outbox), and 205 (user's address book), for 
example, may be stored within the user's e-mail store 106 
and may be accessed through user interface 108. As depicted 
in FIG. 2, source 206 is a database for storing a list of e-mail 
addresses defined by the user. This may include, for 
example, the e-mail addresses displayed by the user's real- 
time awareness and notification system. Such systems gen- 
erate displays of e-mail addresses corresponding to other 
users who are on-line at the same time as the user. This 
functionality may be provided, for example, using programs 
such as AOL's Buddy List®, Excite 's® Personal Access 
List®, or AOL's Instant Messenger®. 

Source 206 may be stored on a server (not shown) 
connected to the user site by a communications network (not 
shown). As shown in FIG. 2, sources 207 (user's personal 
manager) and 208 (other programs) are independent soft- 
ware programs stored on the user's computer or a server (not 
shown) attached to the user's computer via a communica- 
tions network (not shown). In the preferred embodiment 
depicted in FIG. 2., when the filtering system according to 
the present invention is first initiated, the list processor 201 
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automatically accesses the e-mail addresses stored in filter as long as those other users include the password in the 

sources 203 through 208, formats them into an inclusion list "SUBJECT" field of their messages. This embodiment also 

(see FIG. 5), and stores them in storage unit 202. Thus, the eliminates unsolicited mail more effectively because the 

user's initial inclusion list is automatically created. filter will pass only those e-mails with specific "SUBJECT" 



In a preferred embodiment, the list processor 201 also 



field entries. 



automatically updates the incl'usion list. In order to insure . ^ " S ™ E ^***T£jV^ ^ 

that the inclusion list remains current, the list processor 201 be «* n P«7 d t0 the "SUBJECT field of the incommg e-mail 

, „ x , j . c ' . £_ a_ message, for example, using a text search, keyword search 

accesses (polls) e-mail address inform a ion from the sources ^ as ^ be « > {Q quq Q ^ m {n ^ m 

203 to 208 at predeterminedintervals of tune such as hourly, ^ wim me « FR0M - cat of the inclusion lislj the ^ 

daily, weekly or monthly. The update process may also be 10 manually modify the "SUBJECT" category to add or 

implemented as an interrupt-driven process i prompted by one delete sub iSy wor ds or phrases as desired. This category of 

or more of the sources 203 through 208. The list processor the inclusion list may also be automatically updated to 

201 compares the e-mail addresses stored in sources 203 to indude new subject data of newly sent e _ mail messages in 

208 with those stored in the user mclusion list and adds new the user > s outbox 0thef sources of « S UJBJECT" data, such 

e-mail addresses from the sources 203 to 208 to the inclusion ^ ^ ^ ^ ^ . q ^ software programs 

list. In this way, the user inclusion list may be automatically 0Q the computer may also be used t0 creat e and 

u P dated - maintain the "SUBJECT" category of the user inclusion list 

In addition to automatically adding new e-mail source stored by inclusion list processor 102. 

addresses to the inclusion list, the list processor 201 may ^ j n add i t i on to the automatic and manual updating of the 

also optionally delete old addresses from the inclusion list. user i nc i us ion list described above, new data may optionally 

For example, the list processor 201 may be programmed to be added t0 tne user inclusion list as incoming e-mail 

delete an e-mail address from the inclusion list when the messages are processed. For example, if a received e-mail 

e-mail address is not stored in the user's address book, message has "SUBJECT" or other user-definable header 

buddy list or personal manager and has not appeared in the field data matc hing "SUBJECT" or other user-definable 

user's inbox or outbox for a predetermined period of time, header data in the in C i us ion list, the "FROM" and "TO" data 

such as a month. The user may also be prompted to delete from tne e -mail message may be automatically added to the 

an inclusion list entry as a result of the user's deletion of an user inclusion list by the list processor 201. As another 

entry from the user's inbox, outbox, address book, buddy list example, when a received e-mail message has "TO" field 

or personal manager. The functionality of list processor 201 ^ data matching "TO" data in the inclusion list, the "FROM" 

may be accomplished using known programming techniques and "SUBJECT" [or subset of "SUBJECT"] or user defin- 

as would be apparent to one of skill in the art. ab j e header data from the e-mail message may be automati- 

The user may also manually modify the user inclusion list cally added to the inclusion list. As a further example, when 

through the user interface 108. The list processor 201 a received e-mail message has "FROM" field data matching 

receives any modification instructions from the user, such as 35 "FROM" data in the inclusion list, the "TO" and "SUB- 

"add e-mail address," "delete e-mail address," or "modify JECT" or user-definable header data may be automatically 

e-mail address," and modifies the stored user inclusion list added to the inclusion list. In these and other manners 

accordingly. apparent to users and others of ordinary skill, the inclusion 

The "TO," "CC," and "BCC" inclusion list categories list may be continually and dynamically varied as e-mail 

may be initially set to automatically include the e-mail 40 messages are received and processed, 

address of the user. If so, then any incoming e-mail messages A filtering system according to the present invention may 

having the user's e-mail address in the "TO," "CC" or be implemented at the user terminal either as an integrated 

"BCC" field will be displayed in the user's inbox. This function within a user's e-mail program, such as Netscape 

category of the user inclusion list serves to distinguish Message r, Microsoft Outlook, Microsoft Exchange, Lotus 

e-mail specifically directed to the user from e-mail 45 cc: mail, Lotus Notes, Novell mail, Eudora, or AOL, or as 

addressed to broad categories of users. As with the "FROM" a separate user application that interacts with the user's 

category of the inclusion list, the user may manually modify existing e-mail user as would be apparent to one of ordinary 

the "TO," "CC and/or "BCC" categories to add or delete skill in the art. In either embodiment, the e-mail filter 104 

addresses as desired. This category may also be automati- interacts with the e-mail store 106 to access, modify, and 

cally updated to reflect any changes in the user's e-mail 50 categorize e-mail messages as described above, 

address and/or mailing lists to which the user may subscribe. FIG. 2A illustrates an alternative preferred embodiment of 

According to a preferred embodiment of the present the present invention in which the e-mail filter 104 interacts 

invention, the "SUBJECT" category of the user inclusion directly with the network e-mail server. The e-mail filter 104 

list may be initially set to automatically include the infor- receives and filters incoming e-mail messages before they 

mation in the "SUBJECT" field of each message in the 55 are stored in e-mail store 106. This embodiment may be 

user's e-mail outbox. Thus, any incoming e-mail messages implemented using a known message communications 

having "SUBJECT" field data matching the "SUBJECT" means, such as Microsoft's Mail API (MAPI) or an Internet 

data of a message in the user's outbox, for example, a reply mail protocol such as Post Office Protocol (POP3), IMAP or 

message, would be displayed in the user's inbox. Simple Mail Transfer Protocol (SMTP). In a preferred user 

According to another preferred embodiment of the present 60 terminal embodiment, the system according to the present 

invention, the "SUBJECT" or other user-definable e-mail invention is implemented as an add-on system to a known 

header category of the inclusion list remains empty until the e-mail software package, for example, using MAPI config- 

user manually enters information for this category or the u red as a network service provider. This embodiment has the 

inclusion list. This embodiment of the present invention advantage of simplifying the implementation of the present 

enables a user to define one or more specific passwords to 65 invention at the user site terminal. 

insure that mail messages sent from individuals with whom FIG. 3 illustrates a server embodiment of the present 

the user wants to communicate are never eliminated by the invention. This embodiment enables filtering to be per- 
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formed at a central location for all users within a network 
such as a local area network (LAN). As depicted in FIG, 3, 
an e-mail server 301 receives and routes e-mail messages to 
and from a plurality of users such as A, B, C, and D attached 
to an electronic data network 300, The e-mail server may 
also receive e-mail from other networks 315. The e-mail 
server 301 includes an e-mail server message store 306 for 
receiving and storing all e-mail messages transmitted within 
the network 300 and an e-mail filter 304. An inclusion list 
processor 302 stores and maintains at least one inclusion list 
for each e-mail address that is serviced by the e-mail server 
301. For example, in the network configuration depicted in 
FIG. 3, the inclusion list processor 302 maintains a separate 
user inclusion list for each user A, B, C and D. 

The operation of the components of the e-mail server 301 
shown in FIG. 3 is similar to the corresponding components 
in the user terminal system of FIG. 1. All e-mail received by 
server 301 is stored in e-mail store 306. The e-mail filter 304 
filters the stored e-mail messages in accordance with the 
information stored in the inclusion list processor 302. E-mail 
addressed to each user A, B, C, and D is separately filtered 
using the inclusion list stored in inclusion list processor 302 
for each user respectively. Once the e-mail stored in store 
306 is processed by e-mail filter 304, the filtered e-mail is 
then forwarded to each user's terminal. 

In the preferred embodiment of the present invention 
depicted in FIG. 3, the filtering process performed for each 
user A, B, C, and D by the e-mail filter 304 is the same as 
that performed by filter 104 in FIG. 1. The filter 304 
compares the data stored in the "TO," "FROM," "CC," 
"BCC," and "SUBJECT" fields of the incoming e-mail 
messages with corresponding categories of data stored in the 
inclusion list processor 302. If data in any of these fields of 
the incoming e-mail matches data stored in a corresponding 
field of the inclusion list processor 302, the incoming e-mail 
is marked "OK" and forwarded to the user. If no match is 
detected, the e-mail filter 304 performs at least one type of 
heuristic processing to determine whether the e-mail may be 
of interest to the user, and, if not, labels the e-mail message 
accordingly, for example, as "JUNK." 

In the preferred server embodiment shown in FIG. 3, the 
e-mail filter 304 interacts with the e-mail message store 306 
that processes the e-mail and performs other known func- 
tions for a multiplicity of e-mail addresses or accounts. In 
the preferred embodiment, the e-mail store 306 is an 
improved e-mail server message store that stores additional 
information about the category of each e-mail message. In 
an alternative preferred embodiment, the status of e-mail 
messages is handled in a separate database (not shown) 
outside the message store 306. 

As depicted in FIG. 3, the inclusion list processor 302 
may store an inclusion list for each e-mail address or, 
alternatively, an inclusion list for each group of e-mail 
addresses organized by domain or other group. According to 
another alternative preferred embodiment, each inclusion 
list created and maintained by the inclusion list processor 
302 includes an additional data field to identify character- 
istics of at least one user account or e-mail address. This 
embodiment has the advantage of providing centralized 
management of account information for electronic mes- 
sages. 

FIG. 3 A illustrates an alternative preferred embodiment in 
which the e-mail filter receives and filters incoming e-mail 
messages before they are stored in e-mail store 306. This 
embodiment may be implemented using a known message 
communications means, such as MAPI or an Internet mail 



protocol such as POP3, IMAP or SMTP. This embodiment 
has the advantage of reducing the data traffic flow on a 
communications fink by filtering out unsolicited e-mail 
before it is stored at the user site. 

The preferred embodiment of a server-based embodiment 
of the present invention has the advantage of enabling quick 
deployment of the invention because server software can 
generally be updated more quickly than user software. A 
server-based embodiment also has the advantages of ease of 
implementation in an environment where there are multiple 
e-mail users, and reducing the wasted bandwidth of sending 
unsolicited e-mail messages to users who will not read them. 

A method according to the present invention and 
performed, for example, by the e-mail filters 104 and 304 
shown in FIGS. 1 and 3 respectively will now be described 
in detail with reference to FIGS. 4 and 5. 

FIG. 4 provides a process flowchart illustrating the filter- 
ing steps performed by e-mail filters 104 and 304. First, in 
step 401, an e-mail message is received from the network 
either by a user site system such as the system described in 
FIG. 1 or by an e-mail server such as the system described 
in FIG. 3. Upon receipt of an e-mail message, the e-mail 
filter (e.g., 104 or 304) retrieves data from selected fields of 
the received e-mail message as shown in step 402. In step 
403, the e-mail filter compares the field data retrieved from 
the received message with data stored in the corresponding 
category of the user inclusion list. In step 410, if the field 
data from the received message matches a data entry stored 
in the corresponding category of the inclusion list, the 
received message is marked with a first display code indi- 
cating that the status of the message is "OK", In step 411, the 
field data from the received message may optionally be 
added to the corresponding categories of data in the user 
inclusion list. 

As shown in FIG. 4 A, comparing step 403 may include a 
comparison of data retrieved from the "TO," "FROM" and 
"SUBJECT" fields of the received message. As shown in 
step 404, if the "FROM" field data from the received e-mail 
message does not match any data entry in the "FROM" 
4 o category of the stored inclusion list, the "TO," "CC," and 
"BCC" field data from the received message is compared to 
the corresponding categories of data stored in the user 
inclusion list in step 405. 

As illustrated in step 406 of FIG. 4A, if the "TO" field 
data from the received e-mail message does not match any 
data entry in the "TO" category of the stored inclusion list, 
the text stored in the "SUBJECT" field data of the received 
message is compared to the corresponding category of text 
data stored in the user inclusion list. If a match is found, the 
received message is marked with the first display code 
indicating that the status of the message is "OK" (step 410). 
The "FROM" and "TO" data from the received message 
may optionally be added to the corresponding categories of 
data in the user inclusion list (step 411). 

If no matches of the "FROM," "TO," "CC," "BCC," or 
"SUBJECT" field data are identified in step 403 of FIG. 4 or 
steps 404 to 406 of FIG. 4A, in step 412 the e-mail filter 
performs one or more heuristic processes to determine 
whether the received e-mail message meets certain criteria 
suggesting that the message may be of interest to the user. 
If the e-mail message meets one or more of the heuristic 
criteria, in step 413 the e-mail is marked with a second 
display code indicating that the status of the message is 
"NEW." The "lTO,""FROM" and "SUBJECT" field data 
from the e-mail message may optionally be added to the user 
inclusion list by the inclusion list processor (e.g., 102 or 
302) as show in step 414. 



10 



15 



20 



25 



30 



35 



45 



50 



55 



60 



65 



04/02/2004, EAST Version: 1.4.1 



5,999,932 



10 



As shown in step 420, if the e-mail message data does not 
meet any of the heuristic criteria tested in step 412, the 
message is marked with a third display code indicating that 
the e-mail has a "JUNK" status. In one embodiment of the 
present invention, the e-mail message is not displayed to the 
user (step 421) and ultimately discarded by the system (step 
422). 

E-mail messages are displayed to the user in a display 
format determined by their display codes (step 415). For 
example, "OK," "NEW" and "JUNK" messages may be 
displayed in different colors to indicate their different status. 
Other possible display modes include: a) no modification b) 
changing the subject line to reflect the status such as 
changing "Make money FAST!" to "JUNK: Make money 
FAST!"; c) changing font or appearance of the message 
subject line to reflect its status; or d) placing the message in 
a folder based on its status (or other modes as are known in 
the art). The present invention contemplates numerous dis- 
play options for the different types of e-mail messages which 
are apparent to those of skill in the art. 

Notably, while the embodiments of the present invention 
described above describe e-mail processing in which there 
are three categories of e-mail messages, the use of additional 
categories are envisioned to fall within the scope of the 
present invention. These may be defined as necessary by 
defining additional processing steps. For example, e-mail 
messages from certain sources may be marked with a 
display code indicating that they have a "PRIORITY" status. 
Different e-mail display colors or folders may be defined 
based upon the identify of the sender, or the subject matter 
of the messages. Such modifications are intended to fall 
within the scope of the present invention. 

A preferred embodiment of the heuristic processing 
described in step 412 of FIG. 4 will now be described in 
additional detail. Heuristic processing according to the 
present invention involves evaluating the message with one 
or more of the following rules. The "FROM" field matches 
a "TO" entry in the user inclusion list; 

1. The "FROM" field has a domain that matches an Internet 
domain of one or more entries in the "FROM" category of 
the user inclusion list; 

2. The "FROM" field has a domain that matches one of a 
pre-defined list of domains that are assured to be junk-free 
such as corporations or government organizations. 

3. The "FROM" field has a domain that matches one of a 
multiplicity of domains that are input by the user. 

If any of the tests result in a "true" value, the message is 
marked "NEW." Otherwise, it is marked as "JUNK." 

An alternative embodiment to the heuristics includes a 
user-selectable option to use any of these rules. Another 
alternative embodiment reduces or adds these rules to either 
reduced the complexity of implementation or improve the 
quality of the filtering. Other heuristic filtering rules may 
also be defined to assist the e-mail filter in identifying 
e-mails that do not match the stored categories of the user 
inclusion list but are nonetheless of interest to the user. 

The filtering method according to the present invention 
may also be implemented in combination with one or more 
known exclusion-based filtering methods. A preferred 
embodiment of such a combination method is illustrated in 
FIG. 6 and includes an additional filtering step 650 in which 
selected data fields of the received e-mail message are 
compared to corresponding categories in a stored exclusion 
list (for example, stored in inclusion list processor 104 or 
304). In the preferred embodiment, if any matches are 
detected, the e-mail message is automatically marked 
"JUNK." The remainder of the method steps shown in FIG. 
6. correspond to similarly numbered steps in FIG. 4. 
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In a preferred implementation of a combination of the 
filtering method according to the present invention with an 
exclusion-based filtering step, filtering of incoming e-mail 
messages is performed in the following sequence. First, the 
messages are filtered using inclusion list data defined by the 
user. Second, the messages are filtered using exclusion list 
data defined by the user. Third, the messages are filtered 
using inclusion list data automatically created by the system 
as described above and/or predefined inclusion list data. 
Fourth, the messages are filtered using predefined exclusion 
list data. 

While the present invention has been particularly 
described with reference to the preferred embodiments, it 
should be readily apparent to those of ordinary skill in the art 
that changes and modifications in form and details may be 
made without departing from the spirit and scope of the 
invention. It is intended that the appended claims include 
such changes and modifications. 

I claim: 

1. A method for filtering electronic mail addressed to a 
user, comprising the steps of: 

storing a user inclusion list including identification data 
for identifying e-mail desired by the user; 

receiving an electronic mail message; 

comparing data from said received electronic mail mes- 
sage with said identification data; 

upon identifying a match between said electronic mail 
message data and said identification data, marking said 
electronic mail with a first display code; 

displaying in a first display format said electronic mail 
message marked with the first display code to the user; 

upon failing to detect a match between said electronic 
mail message data and said identification data, per- 
forming at least one heuristic process to determine 
whether said electronic mail message may be of interest 
to the user; 

upon identifying an electronic mail message of interest to 
the user, marking said electronic mail with a second 
display code; 

displaying said electronic mail message marked with said 
second display code to the user in a second display 
format; 

upon failing to identify an electronic mail message of 
interest to the user, marking the electronic mail mes- 
sage with a third display code; and 

displaying said electronic mail message marked with said 
third display code to the user in a third display format. 

2. A method according to claim 1, wherein said inclusion 
list is created and updated based upon e-mail message data 
stored in the user's e-mail inbox. 

3. A method according to claim 1, wherein said inclusion 
list is created and updated based upon e-mail message data 
stored in the user's e-mail outbox, 

4. A method according to claim 1, wherein said inclusion 
list is created and updated based upon e-mail message data 
stored in the user's e-mail address book. 

5. A method according to claim 1, wherein said inclusion 
list is created and updated in response to e-mail message 
data stored in the user's personal manager program. 

6. A method according to claim 1, wherein said identifi- 
cation data includes a plurality of categories of data corre- 
sponding to selected fields of e-mail messages received by 
the user. 

7. A method according to claim 6, wherein said electronic 
mail data is data stored in selected fields of said received 
electronic mail message. 
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8. A method according to claim 1, wherein said first (e) upon identifying an electronic mail message of 
display code indicates that said electronic mail message has interest to the user, marking said electronic mail 
a first status, said second display code indicates that said message with a second display code; and 
electronic mail message has a second status, and said third (f) transmitting said electronic mail message marked 
display code indicates said electronic mail message has a 5 with said second display code to said user interface, 
third status. 15. A system according to claim 14, wherein said user 

9. A method according to claim 1, further comprising the interface further enables the user to modify said identifica- 
step of varying said inclusion list in response to data from tion data stored in said inclusion list processor, 
received electronic mail messages marked with said first or 16. A system according to claim 14, wherein said filtering 
second display code. further comprises the steps of: 

10. A method according to claim 1, wherein said at least upon failing to identify an electronic mail of interest to the 
one heuristic process includes at least one of the following user, marking the electronic mail message with a third 
tests: display code; and 

(a) a test to determine whether a first field of said received transmitting said electronic mail message marked with 
electronic mail message matches a corresponding entry said lhird display code t0 ^ ^ i nter face. 

m said user inclusion list; 1? The system according t0 claim 14 , wherein said 

(b) a test to determine whether said first field of said system is implemented within a user terminal. 

received electronic mail message has a domain that 18 tem according t0 claim 14> wherein said 

matches an Internet domain of one or more entries in m is ira leraented within a network server . 

the corresponding category of said user inclusion list; 19 A system according t0 claim Uy wherein said 

(c) a test to determine whether the first field of said sion list is created and updated based upon e . ma ii message 
received electronic mail message has a domain that data stored in the user > s e . mail inbox 

matches one of a pre-defined list of domains; or 2 0. A system according to claim 14, wherein said inclu- 

(d) a test to determine whether a second field of said s j on i^t is created and updated based upon e-mail message 
received electronic mail message matches a second ^ data stor ed in the user's e-mail outbox. 

entry in said user inclusion list. 21. A system according to claim 14, wherein said inclu- 

11. A method according to claim 1, further comprising the s i on i^t is created and updated based upon e-mail message 
step of filtering said electronic mail message using an data stor ed in the user's e-mail address book, 
exclusion list. 22. A system according to claim 14, wherein said inclu- 

12. A method according to claim 11, wherein, when the 3Q s i on list is created and updated in response to e-mail 
data from said electronic mail message matches data stored message data stored in the user's personal manager program, 
in said exclusion list, said electronic mail message is marked 23. A system according to claim 14, wherein said identi- 
with said third display code and displayed to the user in said fication data includes a plurality of categories of data 
third display mode. corresponding selected fields of incoming e-mail messages. 

13. A method according to claim 1, wherein said inclusion 35 2 4. A system according to claim 23, wherein said elec- 
list is created and updated based upon e-mail message data tronic mail data is data stored in said selected fields of said 
stored in the user's real-time awareness and notification received electronic mail message. 

system. 25. A system according to claim 16, wherein said first 

14. A system for eliminating unsolicited electronic mail, display code indicates that said electronic mail message has 
comprising: 4Q a fi^t status, said second display code indicates that said 

an inclusion list processor for storing identification data electronic mail message has a second status, and said third 

for identifying e-mail desired by the user; display code indicates that said electronic mail message has 

an e-mail storage unit for storing incoming electronic mail a third status, 

messages; 26. A system according to claim 14, wherein said inclu- 

an e-mail filter for filtering said stored incoming clec- 45 sion list processor varies said inclusion list in response to 

tronic mail messages in accordance with said identifi- data from received electronic mail messages marked with 

cation data stored in said inclusion list processor and said first or second display code. 

for marking each of said electronic mail messages with 27. A system according to claim 14, wherein said at least 

one of a plurality of display codes to indicate a status one heuristic process includes one or more of the following 

of each of said messages; and 50 tesl s: 

a user interface for displaying said filtered electronic mail (a) a test to determine whether a first field of said received 

messages to a user in accordance with said display electronic mail message matches a corresponding entry 

codes; in said user inclusion list; 

wherein said filtering performed by said e-mail filter (b) a test to determine whether said first field of said 

includes the steps of 55 received electronic mail message has a domain that 

(a) comparing data from said incoming electronic mail matches an Internet domain of one or more entries in 
messages with said identification data; the corresponding category of said user inclusion list; 

(b) upon identifying a match between said electronic or 

mail message data and said identification data, mark- (c) a test to determine whether said first field of said 

ing said electronic mail with a first display code; 60 received electronic mail message has a domain that 

(c) transmitting said electronic mail message marked matches one of a pre-defined list of domains. 

with the first display code to said user interface; 28. A system according to claim 14, further comprising 

(d) upon failing to detect a match between said elec- the step of filtering said electronic mail message using an 
tronic mail message data and said identification data, exclusion list, wherein, when the data from said electronic 
performing at least one heuristic process to deter- 65 mail message matches data stored in said exclusion list, said 
mine whether said electronic mail message may be electronic mail message is marked with said third display 
of interest to the user; code and displayed to the user in said third display mode. 
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29. A system according to claim 14, wherein said inclu- 
sion list is created and updated based upon e-mail message 
data stored in the user's real-time awareness and notification 
system. 

30. A method for filtering electronic mail addressed to a 
user, comprising the steps of: 

storing a user inclusion list including identification data 
for identifying e-mail desired by the user; 

receiving an electronic mail message; 

comparing data from said received electronic mail mes- 
sage with said identification data; 

upon identifying a match between said electronic mail 
message data and said identification data, marking said 
electronic mail with a first display code; 

displaying in a first display format said electronic mail 
message marked with the first display code to the user; 

upon failing to detect a match between said electronic 
mail message data and said identification data, per- 
forming at least one heuristic process to determine 
whether said electronic mail message may be of interest 
to the user; 

upon identifying an electronic mail message of interest to 
the user, marking said electronic mail with a second 
display code; 
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displaying said electronic mail message marked with said 
second display code to the user in a second display 
format; and 

upon failing to identify an electronic mail message of 
interest to the user, marking the electronic mail mes- 
sage with a third display code such that said electronic 
mail message is not displayed to the user. 
31. A method according to claim 30, wherein said at least 
one heuristic process includes at least one of the following 
tests: 

(a) a test to determine whether a first field of said received 
electronic mail message matches a corresponding entry 
in said user inclusion list; 

(b) a test to determine whether said first field of said 
received electronic mail message has a domain that 
matches an Internet domain of one or more entries in 
the corresponding category of said user inclusion list; 

(c) a test to determine whether the first field of said 
received electronic mail message has a domain that 
matches one of a predefined list of domains; or 

(d) a test to determine whether a second field of said 
received electronic mail message matches a second 
entry in said user inclusion list. 
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